Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C0C82965A8511F09E22AA94DAE4EC9C.roa
File: 2C0C82965A8511F09E22AA94DAE4EC9C.roa (raw, json)
Hash identifier: OQ1JHEaKQhxJJPlaK8pqohLW0wKnXmQwLLQWqNdDc08=
Subject key identifier: D4:B4:1E:F5:27:8F:D0:25:47:99:67:2B:DC:32:85:DB:57:F7:8C:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018B98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C0C82965A8511F09E22AA94DAE4EC9C.roa
Signing time: Sun 06 Jul 2025 16:20:47 +0000
ROA not before: Sun 06 Jul 2025 16:20:42 +0000
ROA not after: Sun 12 Oct 2025 16:20:42 +0000
asID: 20473
IP address blocks: 154.197.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101272 (0x18b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 16:20:42 2025 GMT
Not After : Oct 12 16:20:42 2025 GMT
Subject: CN=686aa25f-7bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:9b:98:0f:47:bf:2f:ba:73:3e:48:2c:db:
b3:f9:ba:25:38:ea:65:c3:37:2a:ca:03:f6:89:17:
ab:f6:db:7a:f8:fd:ab:fd:9f:15:9a:9d:0a:0f:e0:
ec:cf:8b:8a:b2:d6:6d:66:55:b9:3a:32:2d:31:44:
8d:08:9d:95:2d:1c:77:57:da:91:4d:13:95:91:e1:
fc:78:89:c4:b5:74:43:d4:b2:67:6e:27:2f:e3:a8:
64:14:df:b1:59:80:dc:e3:5f:f5:b6:d6:b1:5b:b4:
22:07:1e:21:e3:79:7b:96:97:02:7a:96:ae:43:53:
aa:f9:c5:7c:80:8b:d1:54:59:8b:60:98:39:3b:49:
1f:c6:33:fd:ce:07:c0:1a:34:52:aa:df:41:a0:9d:
59:27:7e:dd:b9:b4:1d:be:6f:cd:ff:18:e3:a5:a1:
6c:fd:b2:ca:b5:4c:5d:7f:6c:d8:28:60:ef:5a:f8:
ad:02:6c:73:3f:44:95:ca:fe:67:88:de:96:4b:f7:
d5:88:3a:4d:85:52:eb:54:a0:2d:83:a2:c0:02:c5:
13:fc:4e:ee:eb:04:21:b6:42:06:46:86:38:f5:38:
77:7a:60:c9:52:b1:63:75:81:bf:59:69:1a:68:f3:
39:45:6a:06:dc:9e:09:e1:26:d3:ec:63:79:8e:64:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:1E:F5:27:8F:D0:25:47:99:67:2B:DC:32:85:DB:57:F7:8C:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C0C82965A8511F09E22AA94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d8:b4:a2:70:cf:95:7c:2a:3d:0b:b8:c7:64:8f:f8:ea:99:
fa:04:1d:32:ab:c9:ac:ce:30:2c:de:87:ff:3d:f3:4d:8f:52:
e5:1c:b8:f0:75:68:ad:3f:7e:43:b8:46:34:84:46:31:b5:f5:
90:a0:61:7d:f7:c0:57:4c:78:fa:e0:1b:8b:88:e6:be:ea:fa:
04:d4:62:cd:68:4a:16:db:91:4f:b2:6d:c9:5f:53:25:03:78:
63:1e:f9:1a:27:e1:d9:d3:8f:84:be:8f:0f:c2:0a:6a:81:01:
bc:80:70:d7:f1:df:da:da:cd:7e:2b:e2:89:17:ca:38:5d:e9:
e6:34:8d:e0:30:a7:70:19:14:3c:b5:51:7f:bb:f1:6e:98:0b:
0b:50:19:dd:e3:41:96:51:3e:d7:73:06:1c:81:cd:06:ae:52:
45:3f:0f:33:7d:34:cd:8a:fa:3c:1f:29:77:92:98:9e:ce:72:
e8:0d:0f:07:09:0d:5e:f2:52:be:38:23:1b:75:fd:34:8d:b2:
53:dd:72:f5:e4:9d:fd:66:22:e9:a7:78:9c:89:b5:6f:71:f7:
6b:fa:49:45:9e:06:42:34:65:4c:d2:42:57:0c:6f:70:fe:85:
92:00:c7:5e:2f:eb:5d:09:4d:02:f9:4e:c6:74:34:eb:43:3a:
34:80:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:18:05 2025 by rpki-client